Why does email not get sent in this password reset script?

[tutusaint]

Hello,

I have a password reminder script in my site.
The script displays "password sent to your email address" but the email would never reach you.
Please help

<?
include 'dbb.php';
 
switch($_POST['recover']){
    default:
    include 'lost_pw.php';
    break;
 
    case "recover":
    recover_pw($_POST['emailad']);
    break;
}
function recover_pw($emailad){
    if(!$emailad){
        echo "You forgot to enter your Email address <strong>Alumni</strong><br />";
        include 'lost_pw.php';
        exit();
    }
    // quick check to see if record exists    
    $sql_check = mysql_query("SELECT * FROM user WHERE emailad='$emailad'");
    $sql_check_num = mysql_num_rows($sql_check);
    if($sql_check_num == 0){
        echo "No records found matching your email address<br />";
        include 'lost_pw.php';
        exit();
    }
 
 
    $sql = mysql_query("select password from user WHERE emailad='$emailad'");
 
    $subject = "Your Password at our site!";
    $message = "Hi, we have reset your password.
 
    Your password is: $password
 
    http://www.mysite.com
 
    Thanks!
    The Webmaster
 
    This is an automated response, please do not reply!";
 
    mail($email_address, $subject, $message, "From: imostars Webmaster<alart@mysite>\nX-Mailer: PHP/" . phpversion());
    echo "Your password has been sent! Please check your email!<br />";
    include 'login.php';
}
?>
 

[Dormilich]

you should check the return value of the mail() function, that tells you if there was an error sending or not.

[tutusaint]

The script is sending the email without including the users password.

[Markus]

You have not defined the $password variable anywhere.